HUNGSEC-PRACTICE-2026 · SOURCE-ASSISTED OFFENSIVE SECURITY

Deterministic vulnerability discovery, red team assessments, and coordinated CVE research.

HungSec Labs (operating under legal entity Nguyen Thanh Hung) is an independent offensive security practice led by Principal Security Researcher Hung Nguyen. Cybersecurity testing, static/dynamic vulnerability analysis, and exploit reproduction across web applications, APIs, and open-source software are our primary business operations.

Service & Product Documentation → Published CVE Advisories (2026)

9.8 / 8.8

CVSS v3.1 Published CVEs (2026)

100%

Coordinated Upstream Patch Rate

OWASP / PTES

Standardized Testing Methodology

taint-audit-session // cve-verification-2026.log

RO-SANDBOX

# HungSec Static/Dynamic Sink-to-Source Verification Pipeline $ hungsec-audit --target breeze-cache@2.4.4 --mode sink-trace [01] Parsing AST & entrypoint graph... OK (142 classes) [02] Locating unvalidated filesystem write sinks... → inc/class-breeze-cache-cronjobs.php:119 → Function: fetch_gravatar_from_remote() → CWE-434: Unrestricted Upload of File with Dangerous Type [03] Verifying unauthenticated trigger condition... → CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H — 9.8) → Assigned: CVE-2026-3844 (Finder: Hung Nguyen) $ hungsec-audit --target geodir-events@2.3.28 --mode authz-trace [01] Tracing AJAX action handler ajax_ayi_action()... → includes/class-geodir-event-ayi.php:357 → Unfiltered $_POST['type'] passed to update_user_meta() → Arbitrary wp_capabilities role injection (Subscriber → Admin) [02] Verifying privilege escalation impact... → HIGH (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — 8.8) → Assigned: CVE-2026-11616 (Finder: Nguyen Hung)

01 // CORE SECURITY SERVICES & PRODUCT LINES

Offensive Security Capabilities

All testing engagements and vulnerability research workflows are governed by written Rules of Engagement (RoE) and executed inside network-isolated replica environments.

LINE-01APPLICATION & API PENTESTING

Source-Assisted Penetration Testing

Full-scope white-box and grey-box penetration testing for web applications, REST/GraphQL APIs, and distributed microservices. Focuses on multi-tenant authorization bypass, privilege escalation, SSRF, and arbitrary file upload vectors.

OWASP WSTG v4.2 PTES CWE-269 / CWE-434

LINE-02VULNERABILITY RESEARCH & CVD

Static Taint & CVE Discovery

Automated AST dataflow modeling combined with manual sink-to-source auditing across widely deployed open-source plugins and enterprise software. All findings undergo deterministic PoC reproduction and coordinated vendor disclosure.

MITRE / Wordfence CNA AST Taint Analysis Patch Verification

LINE-03ADVERSARIAL SECURITY TOOLING

AI Agent & MCP Security Auditing

Security assessment and static analysis tooling for LLM tool-use runtimes and Model Context Protocol (MCP) servers, identifying command injection, tool-poisoning, and credential exposure before production deployment.

mcp-guard Sandbox Containment NIST SP 800-115

02 // COORDINATED VULNERABILITY DISCLOSURE LEDGER

Published CVEs Credited to Our Firm (Last 12 Months)

View Complete Technical Advisories →

CVE ID / Advisory	CVSS v3.1	Affected Software & Vulnerability Class	Credited Researcher	Published Date	Verification Links
CVE-2026-3844 HUNGSEC-2026-001	9.8 CRITICAL	WordPress Breeze Cache Plugin <= 2.4.4 Unauthenticated Arbitrary File Upload to Remote Code Execution via `fetch_gravatar_from_remote()` (CWE-434)	Hung Nguyen HungSec Labs (@Hung2124)	2026-04-23	Advisory · CVE.org · NVD · Wordfence CNA
CVE-2026-11616 HUNGSEC-2026-002	8.8 HIGH	Events Calendar for GeoDirectory <= 2.3.28 Authenticated (Subscriber+) Privilege Escalation to Administrator via Unfiltered User-Meta Key in `ajax_ayi_action()` (CWE-269)	Nguyen Hung HungSec Labs (@Hung2124)	2026-06-09	Advisory · CVE.org · NVD · Wordfence CNA

03 // CORPORATE REGISTRY & PRINCIPAL LEADERSHIP

Practice Governance & Security Contact

PRINCIPAL RESEARCHERFOUNDER & LEAD AUDITOR

Hung Nguyen (Nguyen Thanh Hung)

Principal Security Researcher and Founder of HungSec Labs. Credited finder on multiple high- and critical-severity CVEs assigned by Wordfence CNA and MITRE (including CVE-2026-3844 and CVE-2026-11616), and maintainer of open-source security and developer infrastructure tools on GitHub (github.com/Hung2124).

CVE-2026-3844 (9.8) CVE-2026-11616 (8.8) GitHub: @Hung2124

ENTITY & INCIDENT RESPONSE24/7 SECURITY POINT OF CONTACT

Legal Entity & Verification Details

Legal Entity Name: NGUYEN THANH HUNG (Sole Proprietorship)
DBA / Practice Name: HungSec Labs
Registration / Tax ID: 0109842615 (Vietnam)
Headquarters: Km29 Thang Long Boulevard, Hoa Lac Hi-Tech Park, Hanoi 100000, Vietnam
Security & Abuse Contact: hungne2124@gmail.com

Jurisdiction: Vietnam (VN) Public Docs: /docs.html Advisories: /advisories.html